MAGETWO-40265: sensitive resources are web-accessible

Dale Sikkema · Dale Sikkema · commit 6a024f132583 · 2015-08-07T13:14:24.000-05:00
- update nginx config per proposal
diff --git a/nginx.conf.sample b/nginx.conf.sample
@@ -62,9 +62,6 @@ location /pub {
     location ~ ^/pub/media/(downloadable|customer|import|theme_customization/.*\.xml) {
         deny all;
     }
-    location /pub/errors {
-        deny all;
-    }
     alias $MAGE_ROOT/pub;
 }
 
@@ -124,10 +121,6 @@ location /media/import/ {
     deny all;
 }
 
-location /errors/ {
-    deny all;
-}
-
 location ~ cron\.php {
     deny all;
 }

Original file line number	Diff line number	Diff line change
`@@ -62,9 +62,6 @@ location /pub {`
`62`	`62`	`location ~ ^/pub/media/(downloadable\|customer\|import\|theme_customization/.*\.xml) {`
`63`	`63`	`deny all;`
`64`	`64`	`}`
`65`		`- location /pub/errors {`
`66`		`- deny all;`
`67`		`- }`
`68`	`65`	`alias $MAGE_ROOT/pub;`
`69`	`66`	`}`
`70`	`67`
`@@ -124,10 +121,6 @@ location /media/import/ {`
`124`	`121`	`deny all;`
`125`	`122`	`}`
`126`	`123`
`127`		`-location /errors/ {`
`128`		`- deny all;`
`129`		`-}`
`130`		`-`
`131`	`124`	`location ~ cron\.php {`
`132`	`125`	`deny all;`
`133`	`126`	`}`